Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f1aeeef-eb9e-3692-9e6b-f09e07084942.roa
File:                     4f1aeeef-eb9e-3692-9e6b-f09e07084942.roa (raw, json)
Hash identifier:          +xIX8aFRArlj0tvglHJ9f3WH+/1UMKWlBLByaKA/LOo=
Subject key identifier:   85:F2:50:66:EB:2C:A2:30:90:03:3A:DC:37:E8:11:42:7D:B6:D5:AB
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F43285845B3835C590EE4B3E3C43D4180
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f1aeeef-eb9e-3692-9e6b-f09e07084942.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     15313
IP address blocks:        150.252.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:5c:59:0e:e4:b3:e3:c4:3d:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=a96beb2f-8373-4a38-b8e3-936aae4337f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:e5:b1:b1:a8:24:e3:e2:ed:7c:cf:87:f8:
                    72:c9:73:1f:2d:36:29:08:f6:a9:e5:70:92:35:8a:
                    2d:5f:dc:10:a7:e6:9a:cb:8d:39:6f:65:ec:b6:02:
                    c6:e2:5e:0a:bb:f1:19:6a:bd:c0:8d:9d:0a:96:ff:
                    13:f5:c8:75:5d:fe:d7:b9:37:7d:79:c2:8b:0c:a4:
                    8e:da:5a:fc:04:f0:6e:8d:5e:84:c2:12:24:30:d2:
                    78:87:50:2e:eb:b7:4b:32:52:94:a3:8c:db:e6:bc:
                    ed:17:12:78:ea:50:c0:d7:f7:21:14:3d:40:21:5c:
                    a6:65:f6:02:61:b9:00:d1:44:f2:05:9b:a2:ae:e9:
                    e8:66:6e:f5:6a:75:05:59:4a:23:0b:3a:5c:28:8f:
                    d7:a2:92:d7:ad:73:3e:df:2c:8b:02:c8:76:21:9c:
                    10:c6:22:b0:76:df:af:6c:f6:63:c8:15:35:23:44:
                    f8:ce:7f:4f:1d:44:1d:06:ef:c5:0e:b3:38:c0:bd:
                    36:db:dd:cc:cc:7d:55:74:98:34:8f:17:59:ab:44:
                    d5:8e:0c:8b:c7:d8:38:d5:e5:58:58:ce:05:e2:94:
                    27:54:e7:bf:46:23:7c:71:00:0d:20:b6:bc:25:66:
                    d5:63:8f:46:26:e9:c1:7e:0f:8e:83:d4:9b:14:34:
                    eb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F2:50:66:EB:2C:A2:30:90:03:3A:DC:37:E8:11:42:7D:B6:D5:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/4f1aeeef-eb9e-3692-9e6b-f09e07084942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:cf:42:ac:31:62:52:ee:18:52:7d:62:bf:4e:d9:ce:68:3d:
         a9:1b:2e:dc:08:94:17:bb:03:56:bf:ec:21:cb:0f:e7:61:c2:
         c1:5e:c9:a0:e2:67:63:ab:8c:ce:5b:64:79:59:d0:15:0d:b8:
         f0:02:26:5c:22:a8:d2:94:ed:66:38:e5:ef:8c:96:88:8f:1a:
         9e:6a:cf:2d:4f:5e:1f:33:d9:8a:49:95:8b:1b:33:1c:23:ec:
         08:30:4d:6d:a8:39:98:4e:d7:66:57:38:27:a2:5b:24:ec:91:
         67:27:0f:b6:4d:7b:b6:28:2a:01:90:77:ce:39:d4:b7:ef:00:
         91:9a:a4:e2:80:d8:87:12:76:ef:78:b0:bb:fe:b9:b5:95:20:
         bb:ef:a7:85:e4:de:21:10:ea:47:30:87:87:42:74:82:f5:85:
         be:ed:09:2c:89:63:bc:9e:44:ba:cb:07:2f:d7:60:0a:71:71:
         0e:aa:65:bb:b6:14:34:fb:6c:dd:22:6d:0c:6f:3d:04:8f:4d:
         f4:19:cf:d2:67:40:64:9a:ae:0f:6b:cb:54:73:2b:7d:a9:f4:
         46:70:e1:81:76:d1:38:94:24:58:53:4a:f6:7f:f4:06:f2:b7:
         fc:06:f0:a6:ee:92:ed:5d:5f:6e:23:a1:1e:dc:cf:d4:0e:3d:
         69:8c:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:14 2024 by rpki-client on console-ams.rpki-client.org